Group authentication method

• US 8,005,460 B2
• Filed: 02/05/2008
• Issued: 08/23/2011
• Est. Priority Date: 08/24/2007
• Status: Active Grant

• Current Assignee: National Chiao Tung University (Government of The Republic of China), Industrial Technology Research Institute
• Original Assignee: National Chiao Tung University (Government of The Republic of China), Industrial Technology Research Institute
• Inventors: Chen, Yu-Wen, Wang, Jui-Tang, Tseng, Chien-Chao
• Primary Examiner(s): Hu; Jinsong
• Assistant Examiner(s): Shen; Qun
• Application Number:
  US12/025,771
• Publication Number:
  US 20090054036A1
• Time in Patent Office: 1,295 Days
• Field of Search: 455/411, 340/5.8, 379/142.05, 380/229, 380/232, 380/233
• US Class Current: 455/411
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A group authentication method adaptable to a communication system is disclosed. The communication system includes a user group, a serving network, and a home network. The user group includes at least one mobile station. The home network pre-distributes a group authentication key to itself and all the mobile stations in the same user group and generates a mobile station authentication key for each mobile station. The home network generates a group list for recording related information of the user group. The home network has a database for recording the group list. The serving network has a database for recording the group list and a group authentication data received from the home network. The group authentication method includes following steps. The serving network performs an identification action to a mobile station. The communication system performs a full authentication action or a local authentication action according to the result of the identification action.

Claims

1. A group authentication method adaptable to a communication system, wherein the communication system comprises a first group, a serving network, and a home network, the first group comprises at least one mobile station, the serving network has a first database for recording a plurality of group lists and group authentication data received from the home network, the home network pre-distributes a group authentication key and a mobile station authentication key to the mobile station and itself, the home network has a second database for recording the group lists generated by the home network, and the group authentication method comprises:

identifying action to the mobile station through the serving network; and

determining whether the communication system performs a full authentication action or a local authentication action through the serving network according to the result of the identification action, and

a mobile station authentication and key distribution step;

wherein the full authentication action comprises;

the execution of the home network authentication, the mobile station authentication, and key distribution;

wherein the local authentication action comprises;

a transient authentication key obtaining step, wherein the transient authentication key obtaining step comprises;

retrieving the group authentication data from the first database through the serving network, wherein the group authentication data contains which contains a group transient key (GTK) generated at the home network according to the group authentication key;

wherein the group list comprises a group number, the group authentication key, a mobile station ID, an initial value, and a group related message, and the mobile station has the group number, the mobile station ID, and the initial value;

wherein the identification action comprises;

requesting an identification data from the mobile station through the serving network;

generating a first random number through the mobile station, and then generating the identification data according to the mobile station authentication key and the first random number through the mobile station; and

transmitting the identification data to the serving network from the mobile station;

wherein the mobile station has a mobile station authentication message generation function, and the method for generating the identification data comprises;

inputting the first random number and the mobile station authentication key into the mobile station authentication message generation function stored in the mobile station to calculate a first message authentication code (MAC); and

combining the group number, the mobile station ID, the first random number, and the first MAC through the mobile station to generate the identification data.

2. The group authentication method according to claim 1, wherein the serving network determines whether the communication system performs the full authentication action or the local authentication action based on whether the mobile station requires the communication system to perform the full authentication action or not, the communication system performs the full authentication action if the mobile station requires the communication system to perform the full authentication action,

the serving network determines whether the mobile station ID in the identification data received from the mobile station is in the group list recorded in the first database inside the serving network if the mobile station does not require the communication system to perform the full authentication action,

the communication system performs the full authentication action if the mobile station ID in the identification data received from the mobile station is not in the group list recorded in the first database, and

the communication system performs the local authentication action if the mobile station ID in the identification data received from the mobile station is in the group list recorded in the first database.

3. The group authentication method according to claim 2, wherein the full authentication action comprises:

a home network authentication step; and

a mobile station authentication and key distribution step.

4. The group authentication method according to claim 3, wherein the home network authentication step comprises:

transmitting the identification data to the home network through the serving network, and requesting the group list of the mobile station and the group authentication data from the home network through the serving network;

authenticating the mobile station according to the identification data through the home network; and

generating the group authentication data and transmitting the group authentication data and the group list of the mobile station to the serving network through the home network if the home network successfully authenticates the mobile station; and

storing the group authentication data and the group list of the mobile station into the first database inside the serving network.

5. The group authentication method according to claim 4, wherein the home network further has the mobile station authentication message generation function, and the method is for the home network to authenticate the mobile station according to the identification data comprises:

capturing the first random number and the first MAC of the identification data through the home network, and inputting the first random number and the mobile station authentication key into the mobile station authentication message generation function through the home network to generate a second MAC; and

comparing the first MAC and the second MAC through the home network, wherein the home network successfully authenticates the mobile station if the first MAC and the second MAC are the same.

6. The group authentication method according to claim 5, wherein the home network has a key generation function and a plurality of authentication management fields (AMFs), and the method for generating the group authentication data comprises:

generating a second random number through the home network, and inputting the first random number, the second random number, the group authentication key, and the AMFs into the key generation function through the home network to calculate a group transient key (GTK); and

combining the second random number, the AMFs, the first random number, and the GTK through the home network to generate the group authentication data.

7. The group authentication method according to claim 6, wherein the mobile station authentication and key distribution step comprises:

generating a serving network authentication data according to the group authentication data, the group list, and the identification data through the serving network,

and transmitting the serving network authentication data to the mobile station through the serving network;

receiving the serving network authentication data through the mobile station, and then authenticating the serving network according to the serving network authentication data through the mobile station, so as to determine whether the serving network is legitimate to the mobile station;

calculating a master key through the serving network if the serving network is legitimate to the mobile station;

calculating the master key and a fifth MAC according to the serving network authentication data through the mobile station, and then transmitting the fifth MAC to the serving network through the mobile station;

receiving the fifth MAC through the serving network, and generating a sixth MAC according to the group list recorded in the first database and the GTK through the serving network, and comparing the fifth MAC and the sixth MAC through the serving network to generate an authentication result;

transmitting the authentication result to the mobile station through the serving network; and

confirming the authentication result through the mobile station, wherein if the authentication result shows that the authentication is successful, then the serving network and the mobile station performs a secured communication by using the master key.

8. The group authentication method according to claim 7, wherein the serving network has a serving network authentication message generation function, and the method for generating the serving network authentication data comprises:

adding an authentication number of the mobile station which represents the times of authentication performed in the serving network to the initial value through the serving network to obtain a first transient total;

multiplying the first random number by the first transient total through the mobile station to obtain a first transient product;

inputting the GTK and the first transient product into the serving network authentication message generation function through the mobile station to calculate a third MAC; and

generating a third random number through the serving network, and combining the AMFs, the second random number, the first random number, the third MAC, and the third random number into the serving network authentication data through the serving network.

9. The group authentication method according to claim 8, wherein the mobile station has the serving network authentication message generation function and the key generation function, and the method for the mobile station to authenticate the serving network according to the serving network authentication data comprises:

receiving the serving network authentication data and obtaining the AMFs, the second random number, and the first random number in the serving network authentication data through the mobile station, and inputting the AMFs, the second random number, the first random number, and the group authentication key into the key generation function through the mobile station to generate the GTK;

adding the initial value to the authentication number of the mobile station in the current serving network through the mobile station to obtain a second transient total;

multiplying the second transient total by the first random number through the mobile station to obtain a second transient product;

inputting the second transient product and the GTK into the serving network authentication message generation function through the mobile station to generate a fourth MAC; and

then

comparing the fourth MAC and the third MAC in the serving network authentication data through the mobile station.

10. The group authentication method according to claim 9, wherein the serving network has the key generation function, and the method for the serving network to calculate the master key comprises:

inputting the first random number, the third random number, and the GTK into the key generation function through the serving network to calculate the master key.

11. The group authentication method according to claim 10, wherein the mobile station has a group authentication message generation function, and

the method for the mobile station to generate the fifth MAC comprises:

adding the initial value and the authentication number through the mobile station to obtain a third transient total and multiplying the third transient total by the third random number through the mobile station to obtain a third transient product if the mobile station successfully authenticates the serving network as a legitimate serving network; and

then inputting the GTK and the third transient product into the group authentication message generation function through the mobile station to calculate the fifth MAC.

12. The group authentication method according to claim 11, wherein the method for the mobile station to generate the master key comprises:

inputting the first random number, the third random number, and the GTK into the key generation function through the mobile station to generate the master key.

13. The group authentication method according to claim 12, wherein the serving network has the group authentication message generation function, and the method for generating the sixth MAC comprises:

adding the authentication number to the initial value through the serving network to obtain a fourth transient total, and multiplying the fourth transient total by the third random number through the serving network to obtain a fourth transient product; and

inputting the fourth transient product and the GTK into the group authentication message generation function through the serving network to calculate the sixth MAC.

14. The group authentication method according to claim 1, wherein the communication system further comprises a second group, and the mobile station can belong to both the first group and the second group.

15. A group authentication method adaptable to authentications between a home network, a serving network, and a user group, wherein the user group has at least one mobile station, the mobile station and the home network have a group authentication key and a mobile station authentication key, the home network has a group list, the mobile station has a mobile station ID, a group number, and an initial value, the serving network has a database for recording the group list received from the home network, and the group authentication method comprises:

generating an identification data in the mobile station, wherein the identification data comprises a first MAC and the mobile station ID;

transmitting the identification data to the serving network through the mobile station;

determining whether the mobile station ID is in the group list recorded in the database through the serving network, if the mobile station ID is not in the group list recorded in the database;

transmitting the identification data to the home network through the serving network;

generating a second MAC in the home network according to the identification data;

comparing the first MAC and the second MAC, wherein the home network authenticates the mobile station successfully if the first MAC and the second MAC are the same;

generating a GTK in the home network by using the group authentication key;

transmitting a group authentication data and the group list to the serving network, wherein the group authentication data comprises the GTK; and

recording the group list and the group authentication data in the database of the serving network;

if the mobile station ID is found in the group list recorded in the database;

obtaining the group authentication data from the database of the serving network according to the mobile station ID;

generating a third MAC in the serving network by using the group authentication data;

transmitting a serving network authentication data to the mobile station, wherein the serving network authentication data comprises the third MAC;

generating the GTK in the mobile station by using the group authentication key recorded in the mobile station and the serving network authentication data received from the serving network;

the mobile station generating a fourth MAC in the mobile station by using the comparing the third MAC and the fourth MAC in the mobile station, wherein the mobile station authenticates the serving network and the home network successfully if the third MAC and the fourth MAC are the same;

calculating a master key in the serving network by using the group authentication data and the identification data received from the mobile station;

generating the master key and a fifth MAC in the mobile station by using the serving network authentication data and the GTK;

transmitting the fifth MAC to the serving network through the mobile station;

generating a sixth MAC in tile serving network by using the group authentication data;

comparing the fifth MAC and the sixth MAC in the serving network, wherein the serving network authenticates the mobile station successfully if the fifth MAC and the sixth MAC are the same; and

both the serving network and the mobile station transmitting encrypted data by using the master key, so as to perform a secured communication between the serving network and the mobile station.

16. The group authentication method according to claim 15, wherein the group list comprises the group number, the group authentication key, the mobile station ID, the initial value, and a group related message.

17. The group authentication method according to claim 15, wherein the identification data further comprises a flag, and the flag is used for indicating that whether the mobile station requests the serving network to obtain new group authentication data from the home network or not.

18. The group authentication method according to claim 15, wherein the method for generating the first MAC comprises:

generating a first random number in the mobile station; and

calculating the first MAC by using the first random number and the mobile station authentication key.

19. The group authentication method according to claim 15, wherein the identification data further comprises the first random number and the group number.

20. The group authentication method according to claim 15, wherein the method for generating the second MAC in the home network according to the identification data comprises:

calculating the second MAC by using the first random number in the identification data and the mobile station authentication key recorded in the home network.

21. The group authentication method according to claim 15, wherein the home network has a plurality of AMFs, and the method for generating the GTK in the home network by using the group authentication key comprises:

generating a second random number in the home network; and

calculating the GTK by using the AMFs, the second random number, the first random number, and the group authentication key.

22. The group authentication method according to claim 21, wherein the group authentication data further comprises the AMFs, the first random number, and the second random number.

23. The group authentication method according to claim 22, wherein the method for generating the third MAC in the serving network by using the group authentication data comprises:

calculating the third MAC by using the initial value in the group list, the number of the mobile station authenticating the serving network, the first random number, and the GTK.

24. The group authentication method according to claim 22, wherein the serving network generates a third random number, and the serving network authentication data further comprises the first random number, the second random number, the AMFs, and the third random number.

25. The group authentication method according to claim 24, wherein the method for generating the GTK in the mobile station by using the serving network authentication data and generating the fourth MAC in the mobile station by using the GTK comprises:

calculating the GTK by using the AMFs, the first random number, the second random number, and the group authentication key record in the mobile station; and

calculating the fourth MAC by using the GTK, the initial value, and the number of the mobile station authenticating the serving network.

26. The group authentication method according to claim 24, wherein the method for calculating the master key in the serving network by using the group authentication data comprises:

calculating the master key by using the GTK, the first random number, and the third random number.

27. The group authentication method according to claim 25, wherein the method for generating the master key and the fifth MAC in the mobile station by using the serving network authentication data and the GTK comprises:

generating the fifth MAC by using the third random number, the initial value, the number of the mobile station authenticating the serving network, and the GTK; and

calculating the master key by using the GTK, the first random number, and the third random number.

28. The group authentication method according to claim 24, wherein the method for generating the sixth MAC in the serving network by using the group authentication data comprises:

generating the sixth MAC by using the third random number, the initial value, the number of the mobile station authenticating the serving network, and the GTK.

29. The group authentication method according to claim 15, wherein the communication system further comprises a second group, and the mobile station can belong to both the first group and the second group.